7.8

CVE-2024-36358

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1194 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1304 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1337 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1559 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1681 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1822 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1876 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2009 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2204 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2395 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2593 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2971 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3165 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3288 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3445 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3770 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4185 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4416 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4726 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4959 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5137 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5394 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5512 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5761 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5953 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6313 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6658 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6912 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7119 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7303 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7476 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7719 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7943 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8137 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8268 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8438 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8453 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update877 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update690 SwEdition long_term_support
   Linux ≫ Linux Kernel Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1337 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1559 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1681 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1822 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1876 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2009 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2204 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2419 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2593 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2740 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2921 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3165 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3288 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3445 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3530 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3771 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3964 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4185 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4416 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4726 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4959 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5137 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5394 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5512 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5810 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5995 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6313 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6690 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6860 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7119 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7303 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7476 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7719 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7943 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8137 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8268 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8438 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update877 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update690 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update700 SwEdition long_term_support
   Microsoft ≫ Windows Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1194 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1304 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1337 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1559 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1681 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1822 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1876 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2009 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2204 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2395 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2593 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2740 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2921 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3165 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3288 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3445 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3770 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3964 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4185 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4416 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4726 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4959 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5137 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5394 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5512 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5761 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5953 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6313 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6658 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6912 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7119 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7303 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7476 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7719 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7943 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8137 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8268 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8438 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0 Update update877 SwEdition long_term_support
   Opengroup ≫ Unix Version -
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update690 SwEdition long_term_support
   Opengroup ≫ Unix Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.406
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Trendmicro 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-1106 Insufficient Use of Symbolic Constants

The source code uses literal constants that may need to change or evolve over time, instead of using symbolic constants.

https://success.trendmicro.com/dcx/s/solution/000298151
Broken Link
https://www.zerodayinitiative.com/advisories/ZDI-24-575/
Third Party Advisory